auth.php update