implement fallback to basic authentication when GSSAPI/Negotiate fails

Required when accessing a server which offers GSSAPI, but does not belong to the same REALM as the client.