header responds to signed-in users