first adding client-auth