:+1:  but for the sake of simplicity let's change to WWW-Authenticate: AeroGear realm="http://api.aerogear.org"

Wdyt?