use token auth when accessing the api from webapp

One failing integration test still needs to be fixed
visual feedback when submitting forms (#3164)

This also helps with the failing integration test. We needed a way to tell the ajax request was back. Observing the button state now works for that.
Merge pull request #90 from azul/feature/use-token-auth

Feature/use token auth