xhr->run_scan.php
fix perms
auth system