Call-time pass-by-reference has been removed

Upgrade this file to the latest used by mySociety: https://github.com/mysociety/commonlib/blob/9462a28fe12b25637d6e67d7140d444632e3ff7e/phplib/auth.php