CoBo.js: Fix call to authenticated API