add client auth