Fixed HTTP authentication

Rolls back #36 
Fixes #42

`Authorization` header should not be removed. It's enough to disable `auth_basic` module.

cc:\ @linc01n @martianus