If you had to secure requests to an authorization server, how would you do it? | Not Hacker News!