delegate authentication to login provider if authorization header set bu...

...t empty, leads to infinite loop otherwise