Authenticate via auth-token to list repositories

This is important for talking to time-tracker via API (e.g. through hubot).

@tmbo Maybe you can double check this PR.