extended authentication, added client login validation