Change http code for the legacy passwd auth failure When someone tries to authenticate for a user account that has a legacy password, we previously returned 401 without any auth methods. It turns out that returning 401 in this case is a violation of the http spec because you must provide at least one auth method. So change it to use 403 Forbidden.
Change http code for the legacy passwd auth failure
When someone tries to authenticate for a user account that has a legacy
password, we previously returned 401 without any auth methods. It turns out
that returning 401 in this case is a violation of the http spec because you
must provide at least one auth method. So change it to use 403 Forbidden.


agrafix/hackage-server,ocharles/hackage-server,haskell-infra/hackage-server,dzackgarza/hackage-server,agrafix/hackage-server,snoyberg/hackage-server,tkvogt/hackage-server,snoyberg/hackage-server,erantapaa/hackage-server,grayjay/hackage-server,edsko/hackage-server,tkvogt/hackage-server,dzackgarza/hackage-server,ocharles/hackage-server,erantapaa/hackage-server,edsko/hackage-server,grayjay/hackage-server,chrisdotcode/hackage-server,chrisdotcode/hackage-server