add in 401 to force http basic auth (bug 898465)