separating out client authentication from connection authentication