2673: Move auth to headers, avoid combining request body with GET method.
Merge branch '2673-no-request-body-in-get'

closes #2673
Add self-signed.{key,pem} to .gitignore files.