cleanup auth.py