When starting a vpn from the API, do I need to pass in the auth token? If so, how?

kdbrich

Do I put it in the querystring?   Header?    Post as part of the body?   

Is there a way to start a VPN without passing in the password?