All API calls should be done as authenticated

Without the auth_token, get_species_photos would not find your private
photos, and get_tags would fail to get any information about the photos.