modified auth.php