page: move client authentication to php include