Which HTTP authentication mechanism is being used?