has_webauth is better