adding more code to the client auth piece