header style tweak
persist logged-in state across page refreshes (but not server restarts)