OAuth for new Helix rules

Any valid token will work for that endpoint.