changed session variables to solve login bug where SESSION['auth'] was being set without a DB connection