client side authentication added