Authentication with unsecure transports