WIP: AuthHandler

TODO:

- [ ] Add some integration tests
- [ ] Decide whether to allow for "domains" like `*.github.com`