dev: basic support for web auth