changed response header from 200 to 401 when empty token received