While testing a Web Application, you see an HTTP Error code of 403 because you have not logged into the application. Once you log on you navigate to the same resource and get a 401 error. What dose this mean?

The server did not reset your session identifier when you authenticated.

You are attempting to access a protected resource over an insecure protocol and must change the session to use https

The digical certificate provided by the server is not in your trust store.

You are authenticated but not authorized to access the resource.