Don't totally hide the header on login pages

Because we still need to view the message pane (which is part of header
code).