Simple per-request authentication