add a basic webcheck, with authentication