cleaning up auth logic