Why does the webserver need access to All of the Datas? Store the data separately, and create use-tokens for webservers to access data once users have authenticated.

The webservers should be treated as if they're potentially compromised, not given arbitrary access to a database...