Includes a content-type for unauthorized requests

Rack::Lint will complain about a 401 return that doesn't include a
content type