more auth removal