Use bearer token authentication for requests to the asset manager

The asset-manager is protected by signon, so send the bearer token for a Smokey API account in the request header.

This will require additional setup in Jenkins to make sure these parameters are configured, so please don't merge just yet.