Abstract calling WS with implicit user auth headers.

General cleanup elsewhere.