add client authorization to webserver, to be continued