Potential fix so that the Negotiation will not just return a "401" and

Potential fix so that the Negotiation will not just return a "401" and
give up in the case where SPNEGO based authentication failed (NTLM, kdc
not available, etc).
[SECURITY-640]