Allow authentication via query string token

Sometimes it is not possible to supply a cookie for authentication. In this case one can add the authentication string via `&authToken=asdfge342qwa...` to the request.