Pass returned disposition instead of forcing NSURLSessionAuthChallengePerformDefaultHandling