webapp is intercepted using CTW