start works in client-side authentication issues