added auth to client app