Add pass-through auth for backing apps

Support pass-through auth so backing apps can optionally enhance behavior for logged-in users while still allowing selective access.