minor cleanup in auth