change header based on login

remove hrefs