replace login notice with secondary header
* added sessions helper