auth keys for server and client