try to only set the www-authenticate header on non-interactive sessions

source/server/server.ts

@@ -205,7 +205,10 @@ export default async function createServer(config = defaultConfig) :Promise<expr
     }
     let code = (error instanceof HTTPError )? error.code : 500;
 
-    if(code === 401){
+    if(code === 401 && !(req.get("Accept")?.startsWith("text/html") && req.get("User-Agent")?.startsWith("Mozilla"))){
+      //We try to NOT send the header for browser requests because we prefer the HTML login to the browser's popup
+      //Browser tends to prefer text/html and always send Mozilla/5.0 at the beginning of their user-agent
+      //If someone has customized their headers, they'll get the ugly popup and live with it.
       res.set("WWW-Authenticate", "Basic realm=\"authenticated access\"");
     }