exclude php from login.html