Well easiest way would be to just handle the auth in your app and only show the bot to non logged in users. When you embed it, only embed that bot.