refactor($auth): read token from storage and use it in future requests (REST)