link in yahttp
switch to yahttp in auth

A bit more intrusive than needed, but now everybody has a HttpResponse
object.