rest: Add 'WWW-Authenticate: Negotiate' to SSO login page

Without this header firefox will never send the kerberos ticket.