Fixing getList call for non-CustomRecords
Cleaning up per-request credentials implementation

Originally implemented with #71

* no need to cache credentials hash
* no need to do any input validation for auth creds. This is the users
  responsibility
* DRYing things up a bit