added user-client authentication for mobile devices