added content type for unauthorized response