Update basic.php

Move session_start() to after including the autoloader so that the classes exist when retrieving the token from the session variable.