remove npmrc (may contain auth)