Allow HTTP auth passthrough. Useful where you have a paranoid
systems admin who only trusts HTTP auth to protect the site.