client authentication and password business