app2app

Validate owner via pzp id and not session that changes
Skip authentication as it fails in demos.