(re)Enable direct key/token authentication and use for testing. don't cache .httr-oauth