Handle authentication on subrequests