Unauthorized requests are rejected
small failing spec fixed