implement IAUTH client code to query a separate server before allowing