Set the error code when user authentication fail

It's useful to client detect and refresh the user token

@lucianomlima