Teach authentication web service to handle arbitrary flags