put the login into header