That's fine for browser-based watching, literally no one in my group watches via the browser. Even on android it'd be a fight. Grandma's not going to go on to a browser to auth her session.
The clients need to support it. If it were just backend, I'd fork it myself.