header work and routes for logging in