Server-side authentication for external services - Theo's Typesafe Cult