but what if i need to validate that remotely? like say its a webhook that confirms the user is logged in