add client side auth