I'd prefer to include ecash in requests than to auth