clean auth