updated browsertime with support for basic auth & real HAR files, closes #295 and closes #403