removing more of the old authentication layer