Take auth object rather than username + password

Mirrors requests' API and allows using OAuth.