Implement authorization header

[pcrackenberg]

• Change authentication method to send an authorization header, rather than be included in the POST body

• Change password to use base64 encoding

[pcrackenberg]

Moving this back some, because sending a HTTP header using fetch requires CORS, meaning you can't use the Cascade API from the command line without some extra work.