Correct assignment of $valid_login from auth response

Corrects the 'if' condition that was improperly assigning the result of the instanceof check to the $valid_login variable when a boolean was returned from the auth function and not the return boolean itself.