use new streams for web auth