Heimdall auth response body resource leak

[fwcd]

We need to make to defer resp.Body.Close() on all code paths (or some equivalent of that) to avoid leaking the underlying TCP sockets (which can lead to 401s once the pool is exhausted).