some auth client side stuff