add jobid callbacks, make webauth optional, return a cookie