Opens a target site in a named popup, then — after a short delay —
navigates that same named window to a 401 endpoint on this
origin. The auth prompt appears attached to the popup, while the visible
document may still be the target site. Used to check how the browser
attributes the prompt to an origin.