That said, it's worth paying the $10 to upgrade so that you can automatically include authentication credentials in your requests. (E.g. hit the auth endpoint to get a token, and then have that token automatically included in all your subsequent requests.)
Do Chrome apps really not get to share credentials/cookies with the rest of Chrome? Postman asked me to sign in with my google account, and proceeded to show me a login form that looked like a google login page but with no way for me to verify the domain.