FIX: pass auth tokens if only one server
FIX: need global auth token for getXML