So for those who have a problem with $_SERVER['PHP_AUTH_USER']
They first need to check their ServerAPI from phpinfo();
if it is CGI there is no way to use $_SERVER['PHP_AUTH_USER']
You need to recompile PHP.
It turns out that my SERVER API for php is FastCGI.