secure auth page

a secure code that have auth token and sessions using php to prevent CSRF