One step closer to a single sign-on for the web