Improve auth failure

- Respond with a 401 instead of a 403 if the user is unauthorized AND unauthenticated
- Send `connectionData` with every request
  - used to determine which hubs to subscribe to and authorize against
- Port tests

#2493