api authentication did work, just had to use ?access_token=, trying to send token with each backbone sync request