allow passing of options to messages method (e.g. limit, since_message_id)
separate out HttpRequest object and allow login via username/password to grab auth token