added WWW-Authentificate header, closes #11