update auth.php