Added $auth_pages as global

specifies pages involved in authorization (authenticate, login, logout)
and allows the page request to pass through initial filtering
Changed form method to post