Moving the authentication starting point

Now we don't authenticate the client as soon as we instantiate it, instead we get the token on the first request.