clean auth.py