allow users to star packages with an auth token

[bcoe]

Let a user star with their auth-token, important for registry-2.0.

[othiym23]

Squashed and some mild stylistic tweaks made before merging to master.

[thom4parisot]

Which means we could eventually do npm star @myorg/mypackage --registry=https://<token>@my.registry.example.com? :-)

[bcoe]

@oncletom that should work, although I believe we have some of the listing endpoints currently locked down in npm Enterprise.

I know that stars are likely one of the most sought after features for the Enterprise, so don't hesitate to open issues surrounding this feature ;)

[othiym23]

@oncletom Just a quick note: npm uses the credentials for a given scope when making requests, and for those credentials to be sent with npm --registry requests, you have to have logged into that registry using npm login --scope --registry so that the necessary configuration information can be set up in your .npmrc. Just putting the token in the URL is probably never going to work with npm.