Excel rest api authentication. And then my browser sends a second (silent?) request .