Ask the client to perform Mojang "joinServer" locally. Verify with Mojang Session Server from the server using a nonce. If verification passes: replace the player's UUID with the official premium UUID ...