Following the work I did here: https://github.com/michaellwest/westco-security (which is almost an exact copy of what @kamsar did in Unicorn).

Steps:

• Setup shared secret
• Call web api using shared secret rather than username/password.