I'm not sure having the authConfig data in an `Authentication` header is the best idea -- the header implies that you're authenticating to the API itself. Here, we're passing auth data that will be used by the API further down the line to perform certain operations, so I like the idea of having it as a parameter better.