support user class when logging in
css fixes
user require_once everywhere, without parentheses
move session bits to their own file
this will allow working with the session before making the header,
facilitating working with POST data then setting the dialog text