changes to auth, new php for account