HTTP Basic Authentication engine now checks user credentials if allow anonymous is not configured. IN-6