server auth passthrough implementation in client