Make middleware report when auth fails.

Without this, HttpContext.Authenticate will throw an InvalidOperationException because it thinks the given auth type was not present in the pipeline.