It seems to be the way we're doing authentication between fireplace and the mkt APIs, so I'm reproducing the scheme here, if you have a better idea, I'm all ears :)