Deal with obscene HTTP `Authorization` and `WWW-Authenticate` headers.