some what fixed authentication with a webview