Why no check if OpenIDUserInfo is null? And when null return 401?