cleanup
auth or default