fixed client authentication