implemented client auth on the server