show logged-in status in header