sockets - C# WebApi authentication and authorization with UnrealScript frontend -

i have created matchmaking service 3vs3 udk game. teams formed c# web api 2 backend, communicate unrealscript's httprequestinterface.

when team formed, players brought lobby can chat, choose character , ready up. these communications achieved .net's tcplistener , tcpclient, , unrealscript talks tcp server using tcplink class.

i having problem concerning both authentication , authorization. having problems figuring out how identify users securely (their credentials stored in mysql database), unrealscript tcplink can not use ssl stream. let's suppose players authenticate through webservice first, how can maintain (and keep secure) identification on tcp server?

are there candidates job? (hmac, token based? keep in mind it's extremely low level tcp). if there's none, maybe try long polling http instead of tcp sockets? or should scrap unrealscript frontend entirely , replace dll using unrealscript's dllbind?

i should tried exercise myself @ securing webservice, without success after lot of research , lot of trial , error, information on welcome.

for still wondering ended switching long polling server , using jwt tokens through https. although has long-polling-related-issues, seems compromise when frontend udk.