converted to web service without sessions and logins