Default unauthenticated handler incorrect for http-basic workflow

It doesn't make a lot of sense to redirect to /login if we're using http-basic authentication.  The behavior demonstrated by the http-basic friend-demo example (by passing :unauthenticated-handler #(workflows/http-basic-deny "Friend Demo" %)) makes a lot more sense.  Can we make this the default for the http-basic workflow?
