Stand-alone client authentication