sort keys when making authorization header so tests are deterministic
add SASL support
only fire stdin on event once
use HTTP verb from options
new deps
add interactive test for GMail/XOAUTH
reorg source layout