Configuring web-based authentication