Enhanced the res.end('Unauthorized') response

Previously the allFailed() will return 401 Unauthorized. This will
allow for the handling and communication of challenges in Strategies
when the developer does not opt to have the app handle error handling.