no wait

you didn't get it all

if the CLIENT wants to auth

there is no spec in the fucking protocol you moron