Use url-post/url-get instead of url-retrieve

This cleanups code a little bit.
Also do not set auth headers for url-post if auth is not defined.
And silence 'Fetching <url>' output for auto-refresh request since
it is somewhat annoying.
Note: this depends on some changes in deferred.