@qmx @danbev on change this it's not a big deal , we must to make sure that our REST clients will receive HTTP 401 response.

If we're in agreement on this, np. But before the controller must handle HTTP 401.