fixed issue with client-side authentication