cleanup
cleanup and auth failure
send uid and token on all api requests