Owin only redirects if challenge is present.
- Added inconclusive test for authentication type in challenge matching configured in options.