move webservice startup to after plugin startup
Authorization adjustments