header reacts correctly to logged in / logged out