update authorization method; verify auth in web interface by cookie