Add content-type to unauthorized response