Default vhost's DAV was missing auth require valid-user directive.
default vhost DAV : missing allow from all directive.
userdir.conf : WebDAV enabled for /home/*/public_html/dav/