Allow authenticator's unauthenticated() method to return response.