r4367 auth.php: update comment