remove obsolete stuff about authentication