Demand an auth token when using the shell endpoint