Explicitly remove UserIsPilotPatch from middleware

It would only run once (via __init__) anyway, but this way we can wrap things
up nicely.
Use 'Login' header link for unauthenticated users
Properly style header links