use fernet-signed app name as resource password
send Password to router in BackendCommand
verify backend's fernet signature in the router