0.0.2 enhance client side auth