Fix auth basic fallback.

Also fixes realm append.

For realm: replaces ``ngx_strlen(foo.data)`` with ``foo.len``, safer.
For auth_basic, properly send back ``WWW-Authenticate`` headers when negotiate and basic auth fail.

This should fix issue #4.