How to disable WWW-Authenticate challenge?

[murilolobato]

Because of a bug in cordova, in iOS apps responses containing www-authenticate headers are never resolved.

So, what I need to do is somehow remove this header from symfony's response. I made a fresh install of symfony-rest-edition as described in https://github.com/gimler/symfony-rest-edition, then I set the parameter "unauthorized_challenge" of fos_rest key to a blank value but and when I do a request via curl to /notes I still receive the default WWW-Authenticate. And I also need to send a body to the unauthorized response, such as "User disabled" to tell my client that the user is disabled, or not confirmed the email yet. How can I achieve this?