Fix removal of shopify assets (#5)

Minimum fix seems to be adding auth, moving query string to the path
and not using a query property, and adding a content-length header.