HTTPCLIENT-1073: caching module should not reject origin 401 (Unauthorized) response just because it is missing a WWW-Authenticate challenge header; the caching module doesn't care about this and should mind its own business.
httpcomponents/httpclient/trunk/httpclient-cache/src/main/java/org/apache/http/impl/client/cache/ResponseProtocolCompliance.java