don't 500 when a user is unauthorized to access an API (Case:60771)
pr feedback
Merge pull request #340 from dimagi/api-401

don't 500 when a user is unauthorized to access an API (Case:60771)