Don't save creds of anyuser:anypass

If http accepts any user and any pass, it's not a real auth
there is no reason to create cred objects for this.
These creds have been confusing our users
Update http_login.rb

add parens around conditional to make bikeshed prettier
Merge pull request #1836 from dmaloney-r7/bug/anyuser_anypass_http

Verified MSF specs passing, Pro on develop functional tests working (ran Bruteforce, saw normal and verbose output concerning that bruteforce was skipped for such a case and why, verified no cred saved with 'anyuser' user).