Consider making the generation of WWW-Authentication header value publicly accessible

Some services require authentication from the first request, and won't return 401 Authorization Required for responses that are unauthenticated.

Having the ability to generate this header's value and set it manually would make it easier to use these services.