no longer necessary to unset the HTTP Auth header

as it is now more precisely added only to proper requests.
change $options to private static to decrease

database calls to get_site_option()