AJ, this situation might be indicating that using a single sign-on
solution across both the JT and CM would do the trick very nicely.
If in fact both the JT and CM have the concept of user accounts then you
could use a single sign-on package in order to set things up so that
logging into one of them means that you would then have authenticated
access to both. That resolves the authentication problem very nicely.
A very useful single sign-on solution that I've used with PHP and Ruby
on Rails is CAS.
You can learn more about CAS here: http://www.jasig.org/cas
You'll need to determine for yourself whether this or OAuth is a better
fit for your situation.
Dan