Allow sharing Figma documents without exposing secret token

[nounder]

When someone Figma document with a deployed frame, others will be able to deploy it on their own behave. This obviously sucks and was implemented to provide basic auth for initial release.