Authorization via application instead of user-agent