A more tightly integrated implementation for #153. _get_auth_type() returns one of three constants and _mb_request() will use authorization depending on this value and whether auth() has been called.

Signed-off-by: Ryan Helinski <rlhelinski@gmail.com>