We decided to use our own proxy to achieve authentication. Details on the first version of the proxy can be seen here
Any requests with an invalid guid are just dropped. I cannot give you the code because it is integral in our security system, but you should be able to get the general idea.
You can use this feature to log different events, provide a public request for x number of events and so on.