Do you have any ideas how to handle authentication properly in this situation?