Detection via the HTTP response header – WWW-Authenticate