add jobid callbacks, make webauth optional, return a cookie
Merge branch 'web-auth'