clean up auth redirects