Can you just pass the token in the querystring?
Once you start worrying about performance you can cache the token lookup query.
Can you just pass the token in the querystring?
Once you start worrying about performance you can cache the token lookup query.