diff --git a/CloudBuilder/CloudBuilder.Security/Data/WebAuthnOptions.cs b/CloudBuilder/CloudBuilder.Security/Data/WebAuthnOptions.cs
deleted file mode 100644
index 417a25c..0000000
--- a/CloudBuilder/CloudBuilder.Security/Data/WebAuthnOptions.cs
+++ /dev/null
@@ -1,48 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Text;
-using System.Threading.Tasks;
-
-namespace CloudBuilder.Security.Data
-{
-
-    /// <summary>
-    /// Plain-old-data wrapper for the credential fields we persist on
-    /// SecurityUser. The frontend never sees this type.
-    /// </summary>
-    public class StoredBiometricCredential
-    {
-        public byte[] CredentialId { get; set; } = Array.Empty<byte>();
-        public byte[] PublicKey { get; set; } = Array.Empty<byte>();
-    }
-
-    public class WebAuthnOptions
-    {
-        /// <summary>
-        /// Relying Party ID — the registrable domain suffix of the
-        /// origin's host. For dev: "localhost". For production:
-        /// "eleave.1010printing.com".
-        /// </summary>
-        public string RpId { get; set; } = "localhost";
-
-        /// <summary>
-        /// Human-readable relying-party name. Shown in the OS biometric
-        /// prompt ("Use HR Plus to sign in to localhost").
-        /// </summary>
-        public string RpName { get; set; } = "HR Plus";
-
-        /// <summary>
-        /// The full origin (scheme + host + port) the user is loading
-        /// the page from. Fido2NetLib verifies the attestation/assertion
-        /// origin matches this exactly. Must be HTTPS in production
-        /// (localhost is exempt).
-        /// </summary>
-        public string Origin { get; set; } = "https://localhost:8000";
-
-        /// <summary>
-        /// WebAuthn ceremony timeout in milliseconds. Default 60s.
-        /// </summary>
-        public int TimeoutMs { get; set; } = 60000;
-    }
-}