php _get + auth + something in js