separated auth object from client, shouldn't need to reauth every single...

... time.