Always send along auth token in API calls

Now we send the user's auth token in all API requests to allow viewing
of private guides. This also bypasses varnish cache so changes will
actually be reflected when viewing the guide rather than being up to 10
minutes out of date.