I'm currently working on a pinned website tile for my website and instead of using a static XML file i'm linking the tile to a web api that returns user specific XML.

My question is: Is it possible to secure this tile so that a user needs to be logged in before the data loads? The pinned website livetile doesn't send any security request headers/ cookies:

- Http: Request, GET /v1/livetile/firsttile 
    Command: GET
  + URI: /v1/livetile/firsttile
    ProtocolVersion: HTTP/1.1
    UserAgent:  Microsoft-WNS/6.3
    Host:  192.168.14.109:2089
    Cache-Control:  no-cache
    HeaderEnd: CRLF

Sidenote: Notice how it's not even sending an accept header even though it only wants xml.

Info: http://msdn.microsoft.com/en-US/library/ie/dn455106 http://msdn.microsoft.com/en-us/library/ie/hh761491.aspx#

Thanks in advance!