http: prompt for credentials on failed POST