this required an edit of lib/apiauthaction.php to accept the normal login session as authentication. i'm not sure if this might cause any problems or security risks, but i don't think so..