I have an authentication question: I'm using Windows® authentication for a Web site in one environment, and Passport authentication in another. If I check the following value to get the authentication type in Windows sometimes an empty string is returned and sometimes "NTLM" is returned. Shouldn't it always return "NTLM"?