update: move canopsis.auth to webcore