clean up authenticated route