structuring client auth with steps and views