- revisit main page layout
- TEST: add 'withCredentials' to the XHR