auth endpoints for pusher private and presence channels