added basic auth, header/footer functions, started working on non-admin access