update: webcore and auth backends