Use token auth mechanism. This probably should be implemented as a separate micro service used by deck and cannon.