client side authentication intro