client certificate authentication

thanks @chris-rock for cleaning up so much stuff.f (and polluting it with tabs again :D)

I guess this request still works when you pull in #174 before.