edit to auth.php controller to fix redirect

made the redirect url a hidden field in login form