fixed login/signup buttons, only show if user not authenticated