enable non-session auth
add optional webhook create param for rollbackOnError