Fix Bug 919956 - Don't check header if there aren't credentials on the request