put login form in header
refined user login form in header
corrected redirect on wrong login
fixed alert and header
removed individual 'new' pages for sessions and users