Use user-agent instead of X-Requested-With to determine if WWW-Authenticate should be omitted