fixed bug in auth.php