fix(session.auth): do not fatal error on unsafe auth
fix(http.auth): use basic auth in every case
test(http.auth): test basic url auth

* untest unsafe basic auth
feat(session.auth): warn on cleartext auth
Merge pull request #19 from azr/master

fix(session.auth): do not fatal error on unsafe auth