'X-Auth-Challenge: true' header to force auth challenge.