a PHP session-based loginscript to athenticate users on a website