[FIXED JENKINS-25144] Http BasicAuth broken in combination with a web Session

return authentication object instead of null if authentication is not required - otherwise valid login fails with basic authentication