upgraded form_auth library, fixes #605