improve web app auth tokens