How to call a secured AWS API Gateway resource from a static web page?