Fix order of checkReq to properly return 401 on auth fail