remove more code for auth