The web server, the gatekeeper, or both, handle client authentication in series.