Add unset of basic auth header in web app config

Resolves possible issues with Stash 2.1+ and XSRF tokens. See: https://confluence.atlassian.com/display/STASHKB/XSRF+Security+Token+Missing
Merge pull request #36 from afklm/no-auth

Add unset of basic auth header in web app config