auth/scheme: remove stale todo