Move authentication details in http.RoundTripper

Also add support for OAuth