authentication for server-side channels now possible