If you haven't already, I would take a good look at OAuth for API authentication. It is one of the leading authentication protocols used by the likes of Google and many others. Plus there are plenty of client libraries already out there to make it even easier. http://oauth.net/
If there is anything I can do to help, let me know.
Thanks for pointing out the RSS feed. I will look into using that in the mean time.