Figured out how to do the Auth stuff quite nicely.
mr burns simply returns the JSON for refresh