Nothing while in the spec claims in any other case, and often you can't make use of a 401 in that circumstance simply because returning a 401 is only authorized for those who include a WWW-Authenticate header. With the web now a central part of way of life, hacking grew http://pigpgs.com