move user login to header, render in browser.

Instead of fixing it when rendering layout on the server we just pass it
as a global and do as we please on the browser.