added auth to the web app