added client auth tests