Create hidden fields on the server side and include any required authorization headers