If set this allows the request method to be overridden. Must not be set in response to an authChallenge.