whoami talks to an endpoint with bearer auth
compatible with npmconf@othiym23/new-credentials