if basic auth, unset Authorization to prevent returned 401
Apache too
Merge branch 'unset_authorization_header_with_basic_auth'