Require faye clients to provide a valid auth token
Require message publishers to know the application secret