Compute Authorization header only with a username and password defined

The authorization header is always computed for a 'basic' authentication even if we have a null username or password.

This leads to the browser not being able to authenticate the user even if it asks for an username and password through the basic auth popup because we always send a bad header.