update: webcore and auth backends + some fixes