Moving basic auth header to request class; cleaning up hermes public apis