Client needs to download data. Handing over logon details the only way?