- flatten auth config to an Authorization header when the Host is created
- remove individual Authorization handling from connectors
- removed incomplete support for per-request auth
- use per-request headers to provide your own Authorization header per request