updated to only show mask to users with js enabled