fix up use of correct authorization error code