So we do want to require admin login for this?  What about using a shared secret or something instead?