link to root in header
authentication and password resets come preconfigured