Flask's Unauthorized does not return WWW-Authenticate header, therefore having issues with several clients (including browsers)