cleanup auth routes