It could be useful, cleaner and safer to implement a detached web service, with communication based on HTTPS instead of STOMP, to deal with authentication logic (sign-in, log-in, user deletion); either for CodyColor and CodyColorWall. Currently, the authentication is handled inside the main game service. This could be a future enhancement.