some auth cleanups