Add auth token support for simplify endpoint

[jasonrdsouza]

Note that we aren't protecting the extract endpoint because it doesn't actually make any outgoing requests, and so is less of a risk since it can't be used for DDOS amplification attacks like the simplify endpoint could.