Delete www-authenticate header from login response

[jonandernovella]

This makes sure that the basic auth popup is no longer shown by the browser.

Related issue(s) and PR(s)

This PR closes #475

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Other

List of changes made

• The header that was being used by Chrome to display the auth pop-up has now been dropped from our server's http response.

Screenshot of the fix

Testing

• Attempt to log in with invalid creds on Chrome

Definition of Done checklist

• I have made an effort making the commit history understandable
• I have performed a self-review of my own code and commented any hard-to-understand areas
• Tests and lint/format validations are passing
• My changes generate no new warnings

[kusalananda]

Good