Fix recreating replication requests for unauthorized responses when using api keys

Apply the Action returned by the authenticator on the recreated web request.  Also added a check to rebuild the OAuthSource if there was no header on the 401 response to make HttpRavenRequest behave like the default client convention.