I’ve been struggling with this exact issue.  Looking forward to trying this solution.  To summarize, the solution to getting your app to “forget” the HTTP Basic credentials is to append a hash (#) to the end of the URLs that you are requesting data from.