Expose WWW-Authenticate headers