changing a statement in auth.php