adding client-side-auth