Added option disableBasicChallenge to disable returning WWW-Authenticate header.
Setting this option to true will not send the header just a 401.
This is used to prevent native browser authentication popups.