Provide a way to disable basic auth

While some of us would like to think every communication
occurs over SSL, this is a pipe dream.  SPNEGO can be
perfectly fine over an unencrypted channel.  Basic auth
cannot be.  Closes #6.