You can use a secret, which only SERVER1 and SERVER2 know. Then create a hash on SERVER1 using this secret and another factor, maybe the username (i.e. md5($username . $secret)). Send this "key" along with the other info to SERVER2, who can verify this.