Kindly advise how to do auth for a separate service that doesn't have db and is stateless.