Expose WWW-Authenticate headers

Should fix #10.