// includes/auth.php