Remove unused convenience method
Clean up _getUser implementation
Simplify requestAvatarId, don't handle case for uninstalled password
Add an authentication responder locator
Docstring improvements