use token based auth when talking to the api from within the webapp

(from redmine: created on 2013-09-20, closed on 2013-09-27)

• Relations:
  • parent #3518 (closed)