client side auth
basic cliend side auth