logged in as / logout link added to template, merged User class due to db access