require that an authenticator is provided for a client. fixes #202