bugfix simplified auth.php