At this time GitLab don't return 401 in this case, instead it returns 302 and after success logic with fake credentials.
GitLab