client authenticates server: completed