Anyone who added the channel 'could' add it to a private channel list, give the install code to a friend, etc etc - so at least by having the channel itself prompt for a password you could track IPs or something to prevent widespread abuse of your bandwidth. This could be done with a few keyboard screens at the start of when your app loads to prompt for a user name and password, check it against your server, and deny unauthorized/untrusted users. As it's a private channel as well, you could have a master list of device serial numbers who can run it, or a designated approval list of IPs accessing your server as well as tracking the user agent of incoming requests. As to a 'walkthru' on doing this - good luck. Maybe start with the basics - get a user login system working first, and ask for little pieces of the puzzle you encounter issues with as you see them.