add basic support for user / token based auth when calling the api