Drop global signal idea for a simple life, man!

No need to execute signal connect for each request!
Implement getAuthKey and validate at the staff authentication backend level.