removed console.log after successful auth; small cleanup