Make authorization method optional.
Merge options rather than jsonClone to avoid overwriting methods.
Remove duplicate add of auth header.