Don't use a nested object for keys

The 95% use case is oauth'ing to osm.org, or another single URL.
Shouldn't need to specify URL for the former at all, or for the
latter in two places (.url() and .keys()).