Just do it by asking users to log in. Am I missing something here ?