webapp now uses a non-attached coservices for checking users