Match the authentication documentation.

https://github.com/37signals/api/blob/master/sections/authentication.md
Include JSON in invalid response error.