fix for HTTP Authentication

HTTP basic Authentication does not work, though user credentials are present in the negotiated Capabilities. The reason is, all keys, that do not exist in page.settings are filtered and ignored.

This commit fixes this by introducing an object holding additional settings to be allowed. It is built against tag 1.1.0, so it should be both easily backported or merged with master. 

Passing Tests are provided as well. Also, httpbin.org is fantastic for testing HTTP Requests.