Allow plugin authentication from API requests

This will let us control plugins from the API.

Ticket:	#4618