I understand the desire/need to include the WWW-Authenticate header on a 401 response. But this challenge means the server accept's the Basic Access Authentication scheme, see[RFC 2617](http://www.ietf.org/rfc/rfc2617.txt). 

Our server is not supporting the Basic Access Authentication, right?

E.g. we do not send http request header to the server:
```
"Authorization: Basic Base64EncodedValueOfTheCredentials"
```