fix security flaw -- still prints list after redirect to login page

header.php

@@ -4,6 +4,7 @@ include_once('config.php');
 session_start();
 if(!isset($_SESSION['logged_in']) || $_SESSION['logged_in'] == FALSE) {
   header("Location:" . $site_url . "/login");
+  die();
 }
 
 include_once('functions.php');