Fix: don't attempt to sign Hawk error header if credentials lookup failed