Should require an explicit parameter to include the auth token to requests other than the API #1501
Description
Right now balena-request includes the auth token to all requests, unless the sendToken is set to false.
We should default that to false for all requests that are not targeting the API (baseUrl).