make get artifact resource only show 404 to authenticated users

other users must authenticate before they get past 401 for all unknown
artifacts