Bug 919956 - Don't check header if there aren't credentials on the request

https://bugzilla.mozilla.org/show_bug.cgi?id=919956