Set WWW-Authenticate response header

RFC2616:
Regarding HTTP 401 responses;
The response MUST include a WWW-Authenticate header field (section
14.47)