client-side auth and session socket
client