Allow placing credentials in injected request.

- allows for bypassing of authentication handlers
- can place any object in credentials property
My original implementation had a jQuery style method that manipulated internal state. How does that sound? Something like this:
getter: ```browser.credentials()```
setter: ```browser.credentials({ id : "jimbob" })```