Add option for allowing unauthenticated access in Auth::Middleware

[niho]

Allow for use-cases where a request does not need protection, but if the request is authenticated the REMOTE_USER header should be properly set by the middleware.

Can probably be easily done with a simple option, e.g.:

use Auth::Middleware, 'My realm', :allow_unauthenticated => true