better encapsulation and updated web group / user to match the actual one it runs on