added auth token capabilities to server & client