Don't add request params to the auth header

Fixes #2