Fix authentication in Safari.

@dcoutts: I'm not sure what the TODO meant, perhaps you remember?

An empty qop field makes authentication in Safari fail immediately. With the field set to auth, authentication seems to work in the latest Firefox, Safari, Chrome and Internet Explorer. This is with HTTP 4000.2.10.

Fixes #132, which we're getting asked about a lot on admin@hackage.haskell.org.