For testing now I will just leave it a static secret and figure out the whole authentication/authorization scheme at a later stage