move login.php codes to header.php