auth:  whitespace
auth: missing header
auth: add details for POST /clients