Security issues in requests calls

[fmigneault]

All requests calls should remove enforced verify=False.
This is a debuging workaround that should not be enabled in deployed instances with valid SSL certificates.

The requests also assume open access. Realistically, most STAC API will not let user openly push new collections/items. The auth parameter must be supported to pass down an authentication/authorization method, such as https://github.com/Ouranosinc/requests-magpie

For convenience, CLI flags or utilities to pass extra arguments to requests calls could be added, but the should not enforce defaults that disable security features.