Allow auth token to be passed as query param (once again)

Signed-off-by: Stephan Hagemann <stephan@pivotallabs.com>