there used to be a "device registration and linking" example, that would be better than making them log in every time, and you can still add a check to validate their account (user and pass) each time the channel is launched or content is requested.
aspiring