npm / arborist / #590

push

Preserve git+https auth when provided

This makes Arborist use the git+https: url as the saved value in
package-lock.json and package.json files for known git hosts when http
auth is provided.  When auth is not provided, we store the canonical ssh
url in package-lock.json, and the more human-friendly shortcut in
package.json, in order to maintain a canonical save value that is never
git:// for known hosts.

This is the second part of the fix for npm/cli#2054.

2677 of 2677 branches covered (100.0%)

Branch coverage included in aggregate %.

3630 of 3630 relevant lines covered (100.0%)

508.07 hits per line