put an authentication page up front, link to the pdf only available for valid user, quick and not dirty, sounds good?