Added option disableBasicChallenge to disable WWW-Authenticate header.

Setting this option to true will not send the header just a 401.
This is used to prevent native browser authentication popups.