fix basic auth in URL overriding existing auth header

Basic authorization shouldn't be added if an authorization
header exists.  The wrong header was being checked and this
commit fixes that.
update cpanfile
bump Changes