bearerChallenge

When true, failed or absent authentication includes a WWW-Authenticate: Bearer header with the 401 response.

Defaults to false.