handle http auth (both plain and secure)

netaporter was just because I was in a rush :/.  An extractor class or regex could be used here if you want to keep deps to a minimum.