return proper auth error
fixed mime type
check body after authenticating