clean up user sessions, move public key authentication to advanced settings