- cleanup
 - set up flow for validating auth token when user joins