Refactor AuthService to be a more conventional class with instance
methods and fields as per other services.

Make a small change to the API service to ensure that `getAccessToken`
is correctly invoked on an auth service instance.