Add request header methods for managing permanent request headers.

- browser.append_request_header
- browser.replace_request_header
- browser.clear_request_headers
Support passing member objects to browser.login().

The users / members are still expected to hav TEST_USER_PASSWORD as password.
Refactor login to use the new request header methods.