add client script, selective sessions, caching auth manager