add client authentication