Allow query string fallback for REST API SSL authentication

This enables clients to provide authentication keys over SSL as query string params, e.g. `GET /wc-api/v1/orders/count?consumer_key=123&consumer_secret=abc`) as a fallback for when PHP is unable to provide the HTTP basic auth variables.

Fixes #5207