At this moment in time, FxA is *not* supported. I'll update the "authentication" section to reflect that. All authenticated requests should be done with session cookies at the moment. (Of course, the document will be updated when this will change).