remove legacy authentication code