finished basic auth, guest login, page header CSS