respond to Basic auth. challenge even if we already sent credentials in the request -> fixed auth. with redirects