Allow optional auth to be used for client side requests

We will need this for putting certain api requests (eg, snapshot requests) behind auth.