api keys. You can use same system you are using for authenticating users with slight change.