Technically auth is just a [convenience feature](https://github.com/substack/hyperquest/blob/master/index.js#L111) hyperquest is offering to create an [HTTP Basic header](http://tools.ietf.org/html/rfc2617#section-2). It's not a parameter. Since it already automatically provides this convenience [if some credentials happen to be in a URL](https://github.com/substack/hyperquest/blob/master/readme.markdown#var-req--hyperquesturi-opts-cb), maybe it's best if this complication is omitted here.