working client, without message authentication