Pass encrypted session ID (you can use different mechanism) through js post method call, and authenticate the user in logon.aspx page_load, also you can check the url referr to insure the traffic is coming from your server.
Hey, really appreciate this answer. Can you explain a little more in detail?