Added WWW-Authenticate header to be compliant with RFC 2616