fix: forget to remove things from .app.src
ref: removed viral_auth (pulled up and simplified logic), removed almost everything in aaa, aaa is now a library app