godoc no longer supporting https
fix(session.auth): do not fatal error on unsafe auth
fix(http.auth): use basic auth in every case
test(http.auth): test basic url auth

* untest unsafe basic auth
feat(session.auth): warn on cleartext auth