Moved authManager from base to web application

It's rarely used in apps other than web and can be set in config if needed.