cleanup some more auth stuff