code: public static Action unauthorized(final String realm) {
          return new Action(r -> {
              r.addHeader("WWW-Authenticate", "Basic realm=\"" + realm + "\"");
              r.setStatus(HttpStatus.UNAUTHORIZED_401);
              return r;
          });
      }
docs: Returns unauthorized response