Add 2nd step of auth handshake. Return temporary credentials from first step for storage and verification in 2nd step.