get an auth token (API) independently of the current site + do not rely on the current_site locale (API side) for actions not requiring a site + return the API key when accessing the my_account API action