The vast majority of rails applications do not use HTTP basic authentication, and I would guess that most of the ones that do use nginx or apache to provide it.  This was probably not caught until now because hardly anyone uses it.