cleanup authentication, oaut