1 - should reorder parameters in the constructor since is less likely
2 to change the API server than the username or password, or even
3 created_by (which should be better renamed to tool or something)
4 - setters for username, password and created-by might make sense
5 since for read-only operations those would be unnecessary and
6 because for tools built on top of the OsmApi class it might be
7 useful to identify that tool
8 - default username and password should be read from
9 XDG_CONFIG_HOME/<fs_friendly_tool_name>/osm-auth
10 - OsmApi should handle gracefully errors and maybe define new
11 exceptions to be explicit about what happened (?)