login box drops into app if session expires. need to work on conditional visibility of header and logout button DOM elements