signed the client app.  Ammended security settings to get web apps working in iis.