Api64 auth to httpclient

Switched to using oauth library's http client to automatically wrap requess with the appropriate auth headers.  Also added a few tests surrounded auth headers in general.
Consider renaming (e.g. verifyAuthorization), to prevent possible confusion with upper/lowercase `test`/`Test` (this isn't a `Test` that should be run by `go test`).