added authentication to client api