clean up auth