fix auth_block()
links on header location also use _u()
_back() _button() and _a() to implement _u()