override backbone sync to pass auth token