reworked auth client messages