addresses #143 - adds WWW-Authenticate to 400 responses, removes error codes from invalid requests