Closes #630

I didn't conditionally render the logout button and in registry page people can click it without login, but it will return 401 and cause no harm. Let me know if you want me to add another request to get login status first, although I think the login status should be a global state we manage, to save some requests.

Comes with unit tests