this is probably a better place for it...

we have to make sure the server didn't fool us as to who we are