Can you just pass the token in the querystring?

Once you start worrying about performance you can cache the token lookup 
query.

Reply via email to