some util package for WebAuth