updated jso-header to allow or not login