clean up & persist authorization flow