authentication clean-up