if we don't support the auth return original res

make sure we return the original 401 if we don't support the auth.