Render HTTP 401 on bad API keys