finished server side authentication in client