remove auth tokens