Security fix: Removed clientID/client object from all clientAction
methods. Now all methods are executed using the client that was used in
the creation of the clientAction.