settings files and authentication for webapp