Nothing Within the spec claims otherwise, and infrequently You can not utilize a 401 in that problem because returning a 401 is barely lawful for those who include things like a WWW-Authenticate header. This is as simple as it will get, but is often incriminating when there is even a http://pigpgs.com