add client authentication to proxy backend