#1155: Added option to turn on http status 401 if no credentials to let the browser prompt for credentials. But keep it as false, to keep current behavior with returning 403.