Authenticate or Authorization?

[Ricardo Newbery]

In the default vcl, we have the following test...

              if (req.http.Authenticate || req.http.Cookie) {
                  pass;
              }


What issues an Authenticate header?  Was this supposed to be  
Authorization?

Ric