fixed the root link
added simple client creds PoC