header login form is only shown if user don't log in