Make PostAgent use WebRequestConcern, adding options for Basic Auth and User-Agent.

This could probably solve #322.
It'd be worth making sure we still have a spec that proves variable interpolation in the URL, since this was a user request.