client authenticated