authentication complete - user + client