Auth element removed.

Authentication data will be carried in the HTTP headers that are
protected by SSL, i.e. HTTPS is a requirement.