added client side w/ cryptojs -- needs some work