I am creating a web API that allows for Basic authentication for a few calls (Login/Token Generation) and when that authentication fails. I am sending back a WWW-Authentic
WWW-Authentic