Missing SESSION global in auth.php

The file auth.php is missing the declaration for the global $SESSION in the user_authenticated_hook function.  This results in a strict standards notice being logged every time a user logs in.