Streams as access-controlled web resources