Add res.unauthorized() mixin