properly adjust for client/server clock skew