TODO Don't send the auth token where it is not needed for GET requests. This will help with caching maybe?