authorization controller clean up