CLIConnectionFactory.basicAuth was defined but never used

Fixed to pass basic auth to HTTP connections when included in user info portion of URL (e.g. as API token).

`FullDuplexHttpStream` 1-arg ctor deprecated because `CLI` actually passes whatever auth it has computed and so does not use this duplicated logic path.