add ServerAuth extension for added security