Just to make this more explicit, I'd say something like "web server's user", since someone who isn't fully following the context could think "web user" means a person clicking in a web browser.