Fix authentication breaking due to Indy10 making up authentication data when retrying on 40x from the server. The user name and password is unknown and so an empty string is assumed. This useless authentication data supersedes whatever Authentication header one provides. Bug in Indy10?