[webapi] remove auth token from all api params list

Auth token is an implicit requirements for all api calls,
except "obtaining auth token" api. Ref #11