Use HTTP Basic Auth if credentials specified in URI