[FIXED JENKINS-25144] Http BasicAuth broken in combination with a web Session

return authentication object instead of null if authentication is not required - otherwise valid login fails with basic authentication
So is this going to be pulled? It would allow my company to use the next version of jenkins again ;)