title: Uniquely identify that a request is coming from a particular installation of my extension
body: <p>I am developing a chrome extension that needs to communicate with my server. I am using Google Server side oauth for authentication. When the user first installs the extension, he needs to login using google and after the oauth server side flow, my server sends user a unqiueid which my extension stores in the localstorage. Every subsequent request to my server is a post request with uuid being part of the payload to authenticate the user. Now the issue with this scenario is that I am not sure how secure this technique is, as i believe anybody could take someone's else uuid and store it in his localstorage thus being able to access other people's account. I  know i could use ssl for request between my server and client to prevent eavesdropping of  request/response from my server, but even than if i have personal access to somebody else's computer i could easily copy the uuid. I want to know is there any better way of authentication for the extensions without asking user to sign in using oauth everytime he intends to use my extension.</p>