[#48575529] Refactor PublicResponsesAbility.
[#48575529] Send down a 401 (not a 302) when access is denied from an API controller.