cleaning up auth