remove possible auth-loop