fixed: check client identity