auth: delete unused code