added “Web Authentication: A Web API for accessing scoped credentials