update authentication to use the client-side flow