Fixed a bug: never send null authorization headers.

Also added a constructor to specify custom HTTPS handlers
for Service to use.