It's probably not worth special casing this, but a NOT_AUTHORIZED error should, in theory, return a 401 status (whereas other validation problems would be 400 and server problems would be 500). By returning a 401, that's a signal that authenticating as another user may allow the operation to proceed. But, most people only have one GitHub account, so the difference is really minor.