Make auth APIs use IEnumerable instead of IList.

RE: #69
OK that's fair then.