return auth denied if no auth header is present using http-basic workflow.

currently the following auth scheme is failing:

(friend/authenticate {:workflows [(workflows/http-basic :realm "realm"
                                                                :                      :credential-fn (partial creds/bcrypt-credential-fn users))]})

since when the user comes unauthenticated re-routes to /login instead of asking for credentials.