Fixed missing header on 401 Unauthorized response (RFC 2617)

Fix for [Issue #18](https://github.com/auth0/express-jwt/issues/18)