support auth logic and new webmate routes