added WWW-Authenticate header, fix
added Basic authorization method