add WWW-Authenticate header in response for error 400 and 403 as well as...

add the WWW-Authenticate header in the response for status 400, 403 as well as the 401.