added more server side checks

this includes: passwords & unique client names