cleanup before dealing with the client side auth