Don't offer the Negotiate method again when the client has failed to authenticate...