Allow placing credentials in injected request.

- allows for bypassing of authentication handlers
- can place any object in credentials property
This is not needed with `mummy.embalm()` since only the single `Browser` instance is modified.