auth cleanup