Factor out set the username and password algorithms for use by XMLHttpRequest and Fetch

See https://www.w3.org/Bugs/Public/show_bug.cgi?id=23704