Make sure _request calls are authenticated by default.