BUG using isDev query string no longer triggers basic auth (do not merge)

cc @hafriedlander

I know upgrading docs are required for this. I'll write them if you think this is a good solution and remove the do not merge.
Trouble is, isDev operates at quite a low level, there may not even BE a SS_HTTPRequest at the point this is called. Good point on the unset behaviour though. :)