added scheme to unauthorized error causes the http respons to also return the error in the
WWW-Authenticate header (for more information see the Boom docs)