vararg val challenges: Array<out HttpAuthHeader>
to be passed with WWW-Authenticate header
WWW-Authenticate