Update auth handling

Now integrates with the auth handling in `request` a little better.  Fixes #25 
That's a good point; `return authObject`?