Return 401 if token is not passed.