Switch to flask_common exceptions and change from 401 to 403 in some cases