"Where there is an app, there is a platform which can run apps, and such platforms can also run Web browsers, and their authentication cookies can even be shared (which is your problem, really)." . . . .