If using Protected Authentication Path, don't set the LOGIN_REQUIRED flag