Add credentials: 'omit' mode

Basic auth, cookies and client certificates cause a lot of problems for WebSockets. It would be nice to have an option to turn them off.

Unfortunately, I don't think we can turn them off by default because too many existing applications are depending them.