respond to client on Authentication actions