Return 401 upon login failure