moved login out of the header