show login button only if not authenticated