Added WWW-Authenticate header on authentication fail