change the component viewing endpoint to accept the auth token via cookies or query string parameters, this is to make it a bit more easy for mobile clients to pass along the security token