bootstraped users
added full client authentication