Add AUTH_TOKEN to all backend API requests