finishing auth, cleaning up code