Great question. This is a downside, there is no built-in method, but there are some tricks. If I remember correctly you can send headers with incorrect credentials. I’ll have to do some research and add that to my template.
Why browsers do not have better functionality built in for authentication is something that's always been a bit baffling...