WIP authentication for web applications