bind the login page
add session variables on header