patched login with auth.php file outside since only works that way :/