Auth error check is broken; if basic auth is used, we need to return null for json_basic_auth_error; right now if basic auth isnt used we just assume the user is authenticated even if no authentication method has been used.
Merge pull request #10 from tlovett1/bugfix/false-auth

Authentication happening if no auth header is sent.