funny now that I decided to write a post on this I see that there have been others like it in the past,
this one for example.
basically a way to get around the authentication withought disableing it is to enter:
username:password@domain.tld as the site instead of just
domain.tld