The power pages site I'm building requires you to be logged in, and I want a button that the user can press to trigger a flow. I want the flow to identify who the user/contact is. Is this possible? I'm currently triggering a flow (trigger is When Power pages calls a flow) it via javascript, which works, and I figure I could pass the user id via liquid, but that would expose both the url for the api endpoint and the user id, which would probably mean it can be replayed, with different user ids, which is clearly not suitable.
Any other ways to make this flow work?