add  www-authenticate, default username/password is admin/123456