added sasl checks for client (similar to server-side)