Make username and password for HTTP*Sources optional. Fixes #PRIS-80