Add WWW-Authenticate for 401 status