fix login links. add links hiding if unauthorized