clean up and start auth handling