Disable AdminKey challenge unless explicitly requested. Still automatically reads the auth header if present
Merge pull request #4 from NuGet/anurse/1971-challenge200

Fix #1971 by disabling AdminKey challenge unless explicitly requested.