suggest xauth in server package as well