alcstrategy

i *think* that at the very least you need to auth by application to use the api calls for what you want, which means just one token for the actual app as opposed to each user.

Not a workaround, but perhaps something you didn't consider doing