Add authentication to the API requests

[noandrea]

The authentication will be used to identify the owner of the event:

proposed technologies are:

• https://3box.io/
• https://magic.link/

with a preference for 3box