enabling webauth header at user creation