Don't accept 403 challenges by default for auth challenges.

Fixes issue #230.

Reviewed in https://codereview.appspot.com/7039053/.
2 files changed