Working with user preferences would require user accounts. My preference would be to use LDAP to allow everyone to use her / his FNAL SERVICES account.
Connecting to FNAL's SERVICES domain requires an integration module that supports LDAP over SSL.
The basics on using a dedicated service account for the application are covered in:
There is Flask extension available for LDAP based authentication: