http basic auth + tests
remove username & password from URL before doing request (thanks @hodgestar)
adding note about GitHub OAuth2 access tokens
Merge branch 'feature/issue-279-jsbox-basic-auth-xhr' into develop