Simplifying basic auth configuration.

No sense in making people specify the “—user” bit.
Cleaning up a bit.

Having attachments default to an empty array feels more right.