We have a protected page that correctly gets the browser to display the login prompt. Our problem is that, after being authenticated by the server, we want to further authenticate the user and, if they fail, get the browser to re-display the login prompt. Does anyone know how to do this? I have tried clearing the REMOTE_USER variable but it don't think it was actually cleared.