dont display the header.empty template yet - it stops the login redirect from working ("headers already sent")