fixed exception catch order
adjusted status code & return content according to spec
fixed auth header entity missing error