diff --git a/auth-manager.php b/auth-manager.php
new file mode 100644
index 0000000..7bda2bf
--- /dev/null
+++ b/auth-manager.php
@@ -0,0 +1,54 @@
+connect_error) {
+ error_log("Database connection error: " . $conn->connect_error);
+ die("Database connection error.");
+}
+
+// Fetch user information, including token expiration
+$query = "SELECT id, email, given_name, surname, is_board_member, token_expires_at FROM users WHERE auth_token = ?";
+$stmt = $conn->prepare($query);
+$stmt->bind_param("s", $authToken);
+$stmt->execute();
+$result = $stmt->get_result();
+
+if ($result->num_rows === 0) {
+ die("Unauthorized access - Invalid token.");
+}
+
+$user = $result->fetch_assoc();
+
+// Check if token is expired
+if (strtotime($user['token_expires_at']) < time()) {
+ die("Unauthorized access - Token expired. Please contact your administrator.");
+}
+
+// Store session data
+$_SESSION['auth_token'] = $authToken; // Store token for future use
+$_SESSION['user_id'] = intval($user['id']);
+$_SESSION['email'] = $user['email'];
+$_SESSION['full_name'] = $user['given_name'] . " " . $user['surname'];
+$_SESSION['is_board_member'] = intval($user['is_board_member']);
+
+// Redirect only if using URL token
+if (isset($_GET['auth']) && !isset($_SESSION['auth_token'])) {
+ header("Location: questionnaire.php");
+ exit;
+}
+?>
diff --git a/forms/questionnaire.html b/forms/questionnaire.html
index ecc90e4..b391c83 100644
--- a/forms/questionnaire.html
+++ b/forms/questionnaire.html
@@ -1,4 +1,6 @@
+
+
@@ -13,7 +15,12 @@
+
+
+
CCAH IT Assessment Questionnaire
+ Welcome, Board Member!
+