For now, do not return 401 for errors.  Set data to nil and allow upstream to handle it.