a PHP session-based loginscript to authenticate users on a website