upgraded form_auth module, closes #228