auth&login: cleaning