Allow placing credentials in injected request.

- allows for bypassing of authentication handlers
- can place any object in credentials property
Error messages would be more clear with something like `expect(browser, "no credentials").to.have.property("credentials").that.is.deep.equal(credentials)`;