added client side authentication: