Add auth headers to api-server calls

In future 'Authorization: Bootserver' header is required to access rest
resources without any other credentials.

https://github.com/opinsys/puavo-users/commit/a6daac536e87172389a32a385395dd17f709924d