working authentication
cleanup