Base implementation

@Ocramius I don't have much choice about sending `request/response` it's what BaconAuthentication requires for 2-step authentications like facebook and stuff.