Possibly incorrect auth error message for 401 Unauthorized if sendCredentialsOverHttp is true

[chanseokoh]

RegistryEndpointCaller.call():

    boolean isHttpProtocol = "http".equals(url.getProtocol());
    ...

      if (!isHttpProtocol || Boolean.getBoolean("sendCredentialsOverHttp")) {
        requestBuilder.setAuthorization(authorization);
      }
      ...
        } else if (httpResponseException.getStatusCode()
            == HttpStatusCodes.STATUS_CODE_UNAUTHORIZED) {
          if (isHttpProtocol) {
            // Using HTTP, so credentials weren't sent.
            throw new RegistryCredentialsNotSentException(...);

          } else {
            // Using HTTPS, so credentials are missing.
            throw new RegistryUnauthorizedException(...);
          }

So the following check is problematic, because if sendCredentialsOverHttp is set, the credentials were sent.

          if (isHttpProtocol) {
            // Using HTTP, so credentials weren't sent.

The correct way is

    boolean isHttpProtocol = "http".equals(url.getProtocol());
    ...

      boolean sendCredentials = !isHttpProtocol || Boolean.getBoolean("sendCredentialsOverHttp";
      if (sendCredentials) {
        requestBuilder.setAuthorization(authorization);
      }
      ...
        } else if (httpResponseException.getStatusCode()
            == HttpStatusCodes.STATUS_CODE_UNAUTHORIZED) {
          if (!sendCredentials) {
            // Did not send credentials.
            throw new RegistryCredentialsNotSentException(...);

          } else {
            // Credentials are either missing or wrong.
            throw new RegistryUnauthorizedException(...);
          }