USer authorisation with webservices