webaccess: Always sleep for 1s before returning HTTP 401
webaccess: Always sleep for 1s before returning HTTP 401

Not all authentication plugins require the Authorization header, so it
might not be present in subsequent attempts. (In particular, a reverse
proxy might strip it.)

storytouch/etherpad-lite,storytouch/etherpad-lite,ether/etherpad-lite,ether/etherpad-lite,storytouch/etherpad-lite,ether/etherpad-lite