fix uncomplete header links to href=#, reduce alert message height, minor SessionController fixes