minor
change auth status
Can now enable/disable web and/or API.