jaredhanson/passport-http — pull request #26 by geothird (2014-03-14 21:15:05+00:00)
Title: Added option disableBasicChallenge to disable WWW-Authenticate header.

Setting this option to true will not send the header just a 401.
This is used to prevent native browser authentication popups.