Re-added WWW-Authenticate header to comply with standards