Major refactor:
Remove need to authorize with user password, endpoint doesn't actually need a signed in session.
Refactor some internals, DRY some HTTP post requests, clean up the token parsing.