added authentication challenge for 401 requests