Stateless Auth Handler