added authentication for web app as well as services