cleaning up auth
0.6.4