server-side authentication and security built
Security client-side added