Gateway authentication: client authentication before connecting to server? Does authentication with SPS happen before server authentication?