web authentication seems to work