preserve error data when unauthorized