Use HttpClient auth code path, so kerberos works

Contains speculative changes to return responsibility for auth to httpclient, and simplifies integration for NTLM/SSPI clients.