Adds api auth action

This is for those cases where the user can't be forwarded to google for auth (API calls etc). Response is by status code to be handles by calling app.