spnego authentication is still broken