> HTTP 200 OK
> look inside
> actually 401 Unauthorized wrapped in JSON for some reason

@whitequark

Confused Deputy MITM?