Yay. authentication/authorization interactions on the client working fine with api.