IIS asking for windows password

IIS was being stupid.

asking for (windows) authentication password

even though the site was setup to be anonymous access.

so I went into IIS manager

right clicked on the site > properties > directory security > Auth and access control

disabled anonymous access

clicked ok

then went back into it and re-enabled anonymous access

that seemed to fix it

:)