cleaning up authentication