Changed getVar to getPostVar for auth level