interpret http 403 and http 401 as not authorized