Support curl-style '-k' (--insecure) flag / fix basic authentication

This pull request adds the `-k` / `--insecure` option to `razor-client`, allowing SSL verification errors to be ignored.  This is useful if, for instance, one is testing with a self-signed certificate.

You'll notice that, to support this flag, I had to use `RestClient::Resource.new` in `navigate.rb`.  Hence, I added the `create_resource` method to reduce duplication.  The constructor for `Resource` is capable of taking the HTTP basic authentication credentials, so this pull request effectively obviates my previous one.

The only catch is testing.  I don't see a way of testing the `--insecure` option.  VCR deals with HTTP, and not SSL sockets -- there is no way to record the SSL certificate returned by the server in a VCR cassette.

Hence, I added tests to `parse_spec.rb`, but couldn't find a good way to test the actual behaviour of the `--insecure` option.  Informally, I can confirm it works fine on my system when dealing with unverified certificates.

Also, there is still the issue of the one failing test (the "userinfo" test) from my previous PR.  The constructor caches the HTTP username and password of the initial request, and `create_resource` sets the username and password automatically for all subsequent API calls.  Is the intent for `@doc_url` to point to the last API call made?  If so, I can amend `create_resource` to simply build a `URI` object, set its userinfo, and assign it to `@doc_url`.  This should make the test pass.