Add 'WWW-Authenticate' to 401 returns.