Have you tried token based authentication?