Assign defaults to a new object so we don't mutate given options

See this http://lodash.com/docs#defaults

Didn't this before because I was using env variables for authentication (and now I was doing something more explicit) assuming this was unintentional but we should not mutate any objects given to us (the client).