Authenticated Presence

I'm trying to have a who's online list, but it seems that the presence api just allows me to send whatever via .track(). This could be easy to change your name or id to something fake and be abusive if it isn't tied to an authenticated user. Is there a method of getting the user id of the users present that isn't spoof-able?
Was this page helpful?