auth client side