Working de-auth, but it's buggy. Needs to remember states.