fixup! NXD blob/auth: Teach it to handle HTTP Basic Auth too

User signin location is now '/users/sign_in.zip' on gitlab-workhorse v3.0.0

internal/api/auth.go

@@ -326,7 +326,7 @@ func (a *API) verifyDownloadAccess(project string, user *url.Userinfo, query str
 		// first send request without auth set and expect server to send them auth challenge.
 		// and only after the challenge they retry the request with Authorization header set.
 		if authReply.RawReply.Code == http.StatusFound &&
-			strings.HasSuffix(authReply.RawReply.HeaderMap.Get("location"), "/users/sign_in") {
+			strings.HasSuffix(authReply.RawReply.HeaderMap.Get("location"), "/users/sign_in.zip") {
 			r := httptest.NewRecorder()
 			r.Header().Set("WWW-Authenticate", "Basic realm=\"\"")
 			r.WriteHeader(http.StatusUnauthorized)