Expect a 409, not a 401 in case the email is already taken