This should be fixed now.
StackAuth will send down gzip'd content (whether you ask for it or not) just like the API. Content-Encoding is also set, as a debugging aid (for browsers and the like), but bear in mind that proxies love to strip that out so don't rely on its presencepresence*.
*Read: keep doing what you were doing in the first place. :)