cleanup auth flow