Introduce function authenticate(), which performs POST /tokens in
private mode, i.e. giving a token to be checked for authentication.
Function get_endpoints() performs the call in public mode, in order
to retrieve the endpoints.

Initialize endpoints lazily: when a URL is missing, get_endpoints()
is triggered.