remove 'simpleauth', and begin to add webapp