Check for WWW-Authenticate header in unauthenticated response