make authed request for /gists once token fetched