implement ClientRequest auth option, including test