remove auth part