Show/hide login link, require login for data

Bail out on the data route if the user is not logged in, add an
endpoint to determine login status and use it to show the link
or a welcome message