Why do I see multiple entries in my HTTP Access Log for some URLs and only one entry for other URLs when I have IWA authentication enabled?