Get a short-lived pass for the live score cable

Browsers cannot set headers on a WebSocket, so they connect to /cable with this pass in the URL (?cable_token=…) instead of the session token. The pass lasts one hour and only works on the cable; fetch a new one before connecting once it has expired.