Add the option credentialsRequired

I added the option credentialsRequired to enable developers to use this module to identify users without preventing unregistered people from accessing to some data. 
The module works exactly the same way as before if you don't set the credentialsRequired option to false. 
req.user will be undefined if there is no credential and credentialsRequired is false.