webappRoot is used instead of hard-wired URLs