I think you generally just fall back to using normal website auth (cookies/session/etc.). If you really don't want to do that, you could probably work up somet

I think you generally just fall back to using normal website auth (cookies/session/etc.). If you really don't want to do that, you could probably work up something like the author discusses in item No. 5, and generate query parameter "tokens", and append those query params to every link on the rendered page.