Enable HTTP Basic auth via `username/password` Ajax options

I couldn't add a test for failed auth for two reasons:

* With no/wrong credentials, Chrome displays a blocking password dialog
  to the user.
* Browsers cache credentials from one request and use it in another to
  the same host, leading to non-isolated tests.

Fixes #627