update: webcore + auth backends