Move the HTTP authentication code to WebPage

This also disables AutoFill on this kind of authentication.