Allow placing credentials in injected request.

- allows for bypassing of authentication handlers
- can place any object in credentials property
Thanks for the tip. I have added the check for the property existing. The only difference is I put the checks on two different lines like this:

```
expect(browser, "no credentials").to.have.property("credentials");
expect(browser.credentials, "incorrect credentials").to.deep.equal(credentials);
```