try to only set the www-authenticate header on non-interactive sessions

try to only set the www-authenticate header on non-interactive sessions #203