Change auth.inc to auth.php

Some web hosts do not map .inc as a PHP file, so it would display the
contents as text instead. Oops! Fixed that bug here.