David Martin Initial work was planned without auth, but your suggestion seems to be reasonable.
IMHO we should create additional pair of tickets for Android, IOS and Server side to cover that case.
If you guys ok with that let me know I will create required tickets.