Sorry, I missed that this flag is valid only for request handlers. Although Windows version of software I'm working on shows that WinHttpSetOption returns true for session handler and Automatic Logon Policy arguments too. But I realized from the documentation that it doesn't make sense to support it for sessions, so I'l close this PR.