you could have your application do some sort of authenticated request for it on a server maybe? Or better yet, proxy all of your api requests through your server?

I don't know, seems like a lot of runaround to me.