Return unauthorised if username/password not present during auth call