[Security] Return 401 when using use_forward for form authentication