it will run aside the auth-server on each webhead until we decide to move it