Adds missing Close() calls

auth.go

@@ -196,17 +196,20 @@ func (s *authShim) Verify(c *http.Client, rs *http.Response, path string) (reaut
 	reauth, err = s.auth.Verify(c, rs, path)
 	if err != nil && errors.Is(err, ErrAuthChanged) {
 		if auth, aerr := s.factory(c, rs, path); aerr == nil {
+			s.auth.Close()
 			s.auth = auth
 			return true, nil
 		} else {
-			err = aerr
+			return false, aerr
 		}
 	}
 	return
 }
 
 // Close closes all resources
 func (s *authShim) Close() error {
+	s.auth.Close()
+	s.auth, s.factory = nil, nil
 	if s.body != nil {
 		if closer, ok := s.body.(io.Closer); ok {
 			return closer.Close()