e531dbc976
The headers we were looking for were a little too loose and were incorrectly identifying all responses as successful login attempts