The last option is the only correct one. A simple HTTP header would do the trick.