server side auth bits