Allow authenticate property in error returned to authorize callback.

For 401 statuses only. Without this there's no way to let the client know which
kind of auth you're supporting.
Adds WWW-Authenticate header if set.
WIthout this, python client doesn't succeed (it sends initial request without auth data and only adds the auth data if a 401 is returned).