Error 401 has too many headers

[timbl]

HTTP/1.1 401 Unauthorized
Accept-Patch: application/json, application/sparql-update  *
Accept-Post: text/turtle, application/json \* 
Access-Control-Allow-Credentials: true *
Access-Control-Expose-Headers: User, Location, Link, Vary, Last-Modified, WWW-Authenticate, Content-Length
Access-Control-Max-Age: 1728000
Allow: OPTIONS, HEAD, GET, PATCH, POST, PUT, MKCOL, DELETE, COPY, MOVE, LOCK, UNLOCK *
Link: https://timbl.databox.me/solid/issues/chat.ttl,acl; rel="acl", https://timbl.databox.me/solid/issues/chat.ttl,meta; rel="meta" *
Link: http://www.w3.org/ns/ldp#Resource; rel="type"  *
Ms-Author-Via: DAV, SPARQL *
Updates-Via: wss://timbl.databox.me/ *
User: 
Www-Authenticate: WebID-RSA source="https://timbl.databox.me/solid/issues/chat.ttl", nonce="MTQ1MDA1MzE2OXwwU0tMdWJpdkhOYjRwSDFtT3JJLVh4aGl0cXdOSDVBV0tNczVscng2ZHR2YWZrRTRFQTFDUTFkTk1qbExtLWpGNGRUUVRSV3N0Y3UwLUlWaFZ0bmJ0WmZMWWJXS3wZQHqRvBAwU5JNPDqVUiBYzpK_D1t1PcdH0B0ikIJv2g=="
Date: Mon, 14 Dec 2015 00:32:49 GMT
Content-Length: 389
Content-Type: text/html; charset=utf-8

Most of the headers (marked *) reveal info which should not be revealed to someone who does not access.