Simple Page-Owner Token (SPOT) Authentication Spec