remove note now that auth is baked in