Updating auth check to include "not authorized" as well..