added convenience auth header to login response

This takes the work off the client to generate the `Authorization` header for future requests.