change return code on unauthorized options